Providing Dynamic Control to Passive Network Security Monitoring

RAID, pp. 133-152, 2015.

Cited by: 15|Bibtex|Views19|DOI:https://doi.org/10.1007/978-3-319-26362-5_7
EI
Other Links: dblp.uni-trier.de|dl.acm.org|academic.microsoft.com

Abstract:

Passive network intrusion detection systems detect a wide range of attacks, yet by themselves lack the capability to actively respond to what they find. Some sites thus provide their IDS with a separate control channel back to the network, typically by enabling it to dynamically insert ACLs into a gateway router for blocking IP addresses....More

Code:

Data:

Your rating :
0

 

Tags
Comments